I have a 3-interface PIX (outside, corporate, wan) configured to accept VPN client connections. The corporate policy, however, requires all Internet-bound traffic go over the WAN to a gateway in Europe, where they can filter, monitor, check for viri,...